Cluster-Gateway Installation Issue

[liadlauber]

I am trying to install the cluster-proxy addon following the guide at https://open-cluster-management.io/scenarios/pushing-kube-api-requests/. However, the installation is not successful, and I encountered the following error in the pod logs:

E0723 10:24:32.717765 1 base_controller.go:270] "cluster-management-addon-controller" controller failed to sync "ocp-buba/cluster-gateway", err: managedclusteraddons.addon.open-cluster-management.io "cluster-gateway" is forbidden: cannot set an ownerRef on a resource you can't delete: , <nil>
E0723 10:24:32.734141 1 base_controller.go:270] "cluster-management-addon-controller" controller failed to sync "local-cluster/cluster-gateway", err: managedclusteraddons.addon.open-cluster-management.io "cluster-gateway" is forbidden: cannot set an ownerRef on a resource you can't delete: , <nil>
E0723 10:24:33.214594 1 controller.go:317] controller/managedclusteraddon "msg"="Reconciler error" "error"="the server is currently unable to handle the request (get clustergateways.cluster.core.oam.dev ocp-buba)" "name"="cluster-gateway" "namespace"="ocp-buba" "reconciler group"="addon.open-cluster-management.io" "reconciler kind"="ManagedClusterAddOn"
E0723 10:24:33.215779 1 controller.go:317] controller/managedclusteraddon "msg"="Reconciler error" "error"="the server is currently unable to handle the request (get clustergateways.cluster.core.oam.dev local-cluster)" "name"="cluster-gateway" "namespace"="local-cluster" "reconciler group"="addon.open-cluster-management.io" "reconciler kind"="ManagedClusterAddOn"
I0723 10:24:33.743562 1 logr.go:249] ClusterGatewayInstaller "msg"="Start reconciling"
E0723 10:24:34.214379 1 controller.go:317] controller/managedclusteraddon "msg"="Reconciler error" "error"="the server is currently unable to handle the request (get clustergateways.cluster.core.oam.dev local-cluster)" "name"="cluster-gateway" "namespace"="local-cluster" "reconciler group"="addon.open-cluster-management.io" "reconciler kind"="ManagedClusterAddOn"
E0723 10:24:34.215696 1 controller.go:317] controller/managedclusteraddon "msg"="Reconciler error" "error"="the server is currently unable to handle the request (get clustergateways.cluster.core.oam.dev ocp-buba)" "name"="cluster-gateway" "namespace"="ocp-buba" "reconciler group"="addon.open-cluster-management.io" "reconciler kind"="ManagedClusterAddOn"
I0723 10:24:34.584618 1 logr.go:249] ClusterGatewayInstaller "msg"="Start reconciling"
E0723 10:24:35.229267 1 controller.go:317] controller/managedclusteraddon "msg"="Reconciler error" "error"="the server is currently unable to handle the request (get clustergateways.cluster.core.oam.dev ocp-buba)" "name"="cluster-gateway" "namespace"="ocp-buba" "reconciler group"="addon.open-cluster-management.io" "reconciler kind"="ManagedClusterAddOn"
E0723 10:24:35.245879 1 controller.go:317] controller/managedclusteraddon "msg"="Reconciler error" "error"="no such cluster local-cluster" "name"="cluster-gateway" "namespace"="local-cluster" "reconciler group"="addon.open-cluster-management.io" "reconciler kind"="ManagedClusterAddOn"
E0723 10:24:36.231638 1 controller.go:317] controller/managedclusteraddon "msg"="Reconciler error" "error"="no such cluster local-cluster" "name"="cluster-gateway" "namespace"="local-cluster" "reconciler group"="addon.open-cluster-management.io" "reconciler kind"="ManagedClusterAddOn"

Context:

• Kubernetes Version: v1.25.10
• Cluster Type: OpenShift v4.12.20

Expected Behavior:
The cluster-gateway addon should be installed successfully without any errors.

Actual Behavior:
The cluster-gateway installation is failing with the errors mentioned above in the pod logs.

Steps to Reproduce:

1. Followed the installation guide at https://open-cluster-management.io/scenarios/pushing-kube-api-requests/.
2. Ran the necessary commands to install the cluster-proxy addon.
3. Checked the pod logs using 'kubectl logs' and found the errors mentioned above.

Additional Information:

• I have tried reapplying the installation steps, but the issue persists.

[mikeshng]

FYI @xuezhaojun

[xuezhaojun]

Hi, @liadlauber we have 2 PRs to fix the permission issue in this case, you can also update the clusterrole manually in your env if you need it now.

Another question to @mikeshng @qiujian16 Do we want to keep cluster-gateway in our (scenarios)[https://open-cluster-management.io/scenarios/pushing-kube-api-requests/]? cluster-gateway is not under ocm org so we can not promise it's always updated to date. Should we remove this chapter?

[xuezhaojun]

/reopen

The cluster-gateway PR is not merged yet.

[openshift-ci]

@xuezhaojun: Reopened this issue.

In response to this:

/reopen

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[github-actions]

This issue is stale because it has been open for 120 days with no activity. After 14 days of inactivity, it will be closed. Remove the stable label to prevent this issue from being closed.